As we wrote about last week,
Horde has reported Norwegian banks’ PSD2 handling to both the Financial supervisory Authority and Competition Authority. One of the main concerns is that Vipps have distortive advantages. They are the only provider allowed to carry out customer authentication directly in the app. Last week Vipps answered that they want their competitors to have as good access to the banks’ APIs as them.
They admit that Vipps couldn’t have offered the same service if they depended on the same APIs as their competitors. A clear sign that Vipps has a massive anti-competitive advantage in this case.
Sparebanken Vest is also in Hordes spotlight for not providing a PSD2-API but rather make them utilize a fallback-solution. The reason is that they had to prioritize Anti Money Laundering solutions and GDPR.
I would guess Sparebanken Vest as a first-mover on a field like this considering they have a large development department and ventures like Bulder Bank and Folio, which surely must need some Bank-APIs to work. Then again: a bank should never take any security risks on behalf of its customers.